TPMs would be a good thing if they didn't allow remote attestation. That would give you all of the legitimate security benefits you want, while making them useless for evil purposes.